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IN THE CLAIMS 

Please amend the claims as follows. 

1 . (Previously Presented) A method for operating a conditional access system for broadcast 
applications, said conditional access system comprising a number of subscribers, each subscriber 
having a terminal including a conditional access module and a secure device to store 
entitlements, wherein a source signal is encrypted using a first key (Cw), said first key (Cw) 
being changed at a rate, said encrypted source signal being broadcasted for receipt by the 
terminals, wherein entitlement control messages (ECM's) are sent to the secure devices, said 
ECM's comprising the first keys (Cw) encrypted using a service key (Pj), wherein entitlement 
management messages (EMM's) are sent to the secure device providing the service key (Pj) 
required to decrypt encrypted first keys (Cw), wherein a cracked secure device which is used in 
an unauthorized manner is traced by sending different keys required to obtain the first keys to 
different terminals or groups of terminals and monitoring the key information provided by a 
pirate, wherein search EMM's are sent to at least a part of the terminals, said search EMM's 
providing at least the service key (Px) and a dummy key (Poi or Pd2), at least the search EMM's 
comprising identifiers identifying the keys (Pj and Pdi or Pd2)5 wherein first search EMM's with 
the keys (Pt and Pqi) are sent to a first part of the terminals and second search EMM's with the 
keys (Pt and Pd2) are sent to a second part of the terminals, wherein an ECM identifying the 
service key (Pt) to be used to decrypt the encrypted first key (Cw), is sent to all secure devices 
just before the first key (Cw) is needed to decrypt the source signal. 
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2. (Previously Presented) A method according to claim 1, wherein the encrypted source 
signal comprises a stream of data packets, wherein successive groups including at least one data 
packet, are encrypted using successive first key (Cwi, Cw2,. . Cwi,. . .jCwn)^ each data packet 
having a flag indicating the first key (Cwi) to be used for decrypting the data packet, wherein in 
stead of an ECM identifying the service key (Px) an ECM identifying a dummy key (Pdi or Pd2) 
to be used to decrypt a next encrypted first key (Cwi), is sent to the secure devices of the first and 
second parts of the terminals, respectively, just before the first key (Cwi) is needed to decrypt the 
source signal, whereas the data packet is encrypted using the previous first key (Cwi-i). 



3. (Previously Presented) A method according to claim 1, wherein a set of search EMM's is 
sent to the terminals, each search EMM providing two keys (Pj and Pdi, PT and Pd25- • Pt and 
Pdh). 

4. (Currently Amended) A method for operating a conditional access system for broadcast 
applications, said conditional access system comprising a number of subscribers, each subscriber 
having a terminal including a conditional access module and a secure device to store 
entitlements, wherein a source signal is encrypted using a first key (Cw), said first key (Cw) 
being changed at a rate, said encrypted source signal being broadcasted for receipt by the 
terminals, wherein entitlement control messages (ECMs) are sent to the secure devices, said 
ECMs comprising the first keys (Cw) encrypted using a service key (Pt), wherein entitlement 
management messages (EMMs) are sent to the secure device providing the service key (Pj) 
required to decrypt encrypted first keys (Cw), wherein a cracked secure device which is used in 
an unauthorized manner is traced by sending different keys r e quir e d to obtain th e first k e ys to 
different terminals or groups of terminals and monitoring the key information provided by a 
pirate, wherein a set of search EMMs is sent to at least a part of the terminals, each search EMM 
of the set comprising a different dummy key (Pn V each of the dummv kevs fPn) being a key 
other than a correct service kev (Pt) for decrypting an encrypted first key (Cw). and each search 
EMM being sent to a different part of the terminals or group of terminals . 
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5. (Previously Presented) A method according to claim 3, wherein the terminals are divided 
into groups, wherein in a first search step the number of search EMM's of the set of search 
EMM's corresponds to the number of groups. 

6. (Currently Amended) A method for operating a conditional access system for broadcast 
applications, said conditional access system comprising a number of subscribers, each subscriber 
having a terminal including a conditional access module and a secure device to store 
entitlements, wherein a source signal is encrypted using a first key (Cw), said first key (Cw) 
being changed at a rate, said encrypted source signal being broadcasted for receipt by the 
terminals, wherein entitlement control messages (ECMs) are sent to the secure device, said 
ECMs comprising the first keys (Cw) encrypted using a service key (Pt), wherein entitlement 
management messages (EMMs) are sent to the secure devices providing the service key (Pt) 
required to decrypt encrypted first keys (Cw), wherein a cracked secure device which is used in 
an unauthorized manner is traced by sending different keys required to obtain the first keys to 
different terminals or groups of terminals and monitoring the key information provided by a 
pirate, wherein the source signal or the ECMs are encrypted using a multiple-key or secret- 
sharing cryptographic algorithm having a plurality of different decrypting keys or shares (Ci;Pi) 
of which any one or anv one or more, respectivelv, is required for decrypting the encrypted 
source signal or ECMs, respectively, wherein said plurality of different decrypting keys or 
shares (Ci;Pi) are sent to at least a part of the terminals such that different terminals or groups of 
terminals receive different keys or shares (Ci;Pi) according to a predetermined distribution. 

7. (Previously Presented) A method according to claim 1, wherein the distribution of the 
terminals in groups of terminals is varied to trace the cracked secure device. 



8. (Previously Presented) A method according to claim 4, wherein the distribution of the 
terminals in groups of terminals is varied to trace the cracked secure device. 



AMENDMENT AND RESPONSE UNDER 37 CFR § 1.1 16 - EXPEDITED PROCEDURE Page 5 

Serial Number: 09/914^58 Dkt: 2069.013US1 

Filing Date: August 21, 2001 

Title: METHOD FOR OPERATING A CONDITIONAL ACCESS SYSTEM FOR BROADCAST APPLICATIONS 



9. (Previously Presented) A method according to claim 6, wherein the distribution of the 
terminals in groups of terminals is varied to trace the cracked secure device. 



